Free EC-COUNCIL EC0-479 Exam Dumps Questions & Answers

Which is a standard procedure to perform during all computer forensics investigations?

• A.  with the hard drive in the suspect PC, check the date and time in the File Allocation Table
• B.  with the hard drive in the suspect PC, check the date and time in the systems CMOS
• C.  with the hard drive removed from the suspect PC, check the date and time in the systems CMOS
• D.  with the hard drive removed from the suspect PC, check the date an d time in the systems RAM

You are called by an author who is writing a book and he wants to know how long the copyright for his book will last after he has the book published?

• A.  the life of the author
• B.  the life of the author plus 70 years
• C.  70 years
• D.  copyrights last forever

What is the following command trying to accomplish?

• A.  Verify that TCP port 445 is open for the 192.168.0.0 network
• B.  Verify that NETBIOS is running for the 192.168.0.0 network
• C.  Verify that UDP port 445 is open for the 192.168.0.0 network
• D.  Verify that UDP port 445 is closed for the 192.168.0.0 network

What will the following URL produce in an unpatched IIS Web Server?

• A.  Directory listing of C: drive on the web server
• B.  Execute a buffer flow in the C: drive of the web server
• C.  Directory listing of the C:\windows\system32 folder on the web server
• D.  Insert a Trojan horse into the C: drive of the web server

Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

• A.  Open
• B.  Closed
• C.  Filtered
• D.  Stealth